Appln. No. 09/786,114 


Attorney Docket No. T2 146-906838 


Amendments to the Claims : 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims : 

Claims 1-5 (Cancelled) 

6. (Currently Amended) A method for verifying transformation of a source code 
f44-irito a transformed code {^designed for an embedded system, said source and 
transformed codes being associated with virtual machines , characterized in that it 
comprises at least the following steps comprising : 

- detennining, for each of said source fJ^and transformed f^codes, a first 
common subset (13) , constituting a single virtual machine that factors in the behavior of 
said source and transformed codes (1 ,3) ; 

- determining, for each of said source f4^and transformed (3)-codes, a second 
subset (10, 30) constituted by a plurality of so called auxiliary functions {+0, — 30^ used 
by said single virtual machine, said auxiliary functions fi-O, — 3^/)-representing residual 
differences between said source f4-)-and transformed f3Vcodes and parameterizing the 
single virtual machine ; 

- associating said auxiliary functions in pairs, a first auxiliary function f+0^^of 
each pair belonging to said second subset f4-0)-associated with said source code fi^and a 
second auxiliary function (300 of each pair belonging to said second subset (30) 
associated with said transformed code-(3); 
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- verifying (6)-a given correspondence property between said auxiliary functions 
f4-0f — 30,^of all of said pairs; and 

- verifying that said transformation of the source code f^into a transformed code 
(3^satisfies said given correspondence property. 

7. (Currently Amended) A method according to claim 6, characterized in that 
wherein said correspondence property is a logical relation, so that said auxiliary functions 
of each of said pairs-f4-0^ — 30^^, when executed, generate results linked by said logical 
relation. 

8. (Currently Amended) A method according to claim 6, characterized in that 
wherein said logical relation is an identity relation for observable entities of each of said 
source and transformed codes, for any pair of auxiliary functions, so that the 
functionalities of said source code f4^are retained when said transformation into said 
transformed code-(^, and said verification of the code transfonnation are performed. 

9. (Currently Amended) A method according to claim 6 fiirther comprising 
applying the steps of the verification of transformation to a code transformer f3)-and 
generating from said source code-f4^, a transfomied code f^in a memory (71) of a chip 
card-(7). 

10. (Currently Amended) A method according to claim 7 further comprising 
applying the steps of the verification of transformation to a code transformer (3)-and 
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generating from said source code-(+). a transformed code (3^in a memory (71) of a chip 
card-P), 

1 1 . (Currently Amended) A method according to claim 9, characterized in that, 
wherein said transformed code is a program written in the virtual machine of a given 
computer language, and said chip card f7)-stores a plurality of software applications {A4. 
through A n)-written in said transformed code-(^. 

12. (Currently Amended) A method according to claim 10, characterized in that, 
wherein said transfomied code is a program written in the virtual machine of a given 
computer language, and said chip card f?)-stores a plurality of software applications (A4. 
through A ft) written in said transformed code-f^. 

13. (Currently Amended) A method according to claim 9, characterized in that 
wherein said source code (4)-is a program written in a "JAVA" virtual machine and said 
transformed code f3^is a program written in a "JAVA CARD" virtual machine. 

14. (Currently Amended) A method according to claim 10, characterized in that 
wherein said source code fi)-is a program written in a "JAVA" virtual machine and said 
transformed code f3)-is a program written in a "JAVA CARD" virtual machine. 

1 5. (Currently Amended) A method according to claim 1 1 , characterized in that 
wherein said source code f4^is a program written in a "JAVA" virtual machine and said 
transformed code fS^is a program written in a "JAVA CARD" virtual machine. 
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16. (Currently Amended) A method according to claim 12, characterized in that 
wherein said source code f+^is a program written in a "JAVA" virtual machine and said 
transformed code (3^is a program written in a "JAVA CARD" virtual machine. 
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